Bank of Ireland Hiring for Threat Intelligence Analyst Job at Dublin , Ireland Full Time

The purpose of the Threat Intelligence Analyst is to support the bank in the delivery of excellent Threat Intelligence products. The Threat Intelligence Analyst will provide support across a number of areas:

• Cover the full intelligence life cycle whilst demonstrating proven technical capabilities, commercial awareness, strong communication and interpersonal skills.
• Establish and maintains relationships with internal stakeholders and third-party providers
• Support the vision to innovate and create the best threat intelligence products, moving at pace towards a best in class operation.

The Threat Intelligence Analyst is responsible for the collection and analysis of multiple open source and subscription data points to collate intelligence that focuses on strategic adversarial activities. The Threat Intelligence Coordinator will support IT operations to respond to cyber incidents by providing insightful threat analysis and will ensure that threat feeds are analysed and appropriate stakeholders informed. The produced threat intelligence will be used by many different areas within the organization and escalated as appropriate.

What is the opportunity?

To work in a diverse, highly motivated, collaborative team with multiple skillsets, critical to protecting one of the Group’s most important and valuable assets/ Information.

Working at Bank of Ireland doesn’t have to mean working in an office to have an impact. Our commitment to enabling colleagues to thrive means that depending on role type you can have choice and flexibility in where you work and live, subject to your role, customer needs and our requirements. We have a hybrid working model, with home, agile hub and office based options available. We will always list a primary location which can be where you go for in person collaboration, and a location where you can best perform your role.

Please note you must live in the jurisdiction for the business to which you are contracted.

This job can be done anywhere in ROI with the primary office location as Dublin to which travel will be required for in person collaboration. Exact frequency to be agreed with manager.

Key Accountabilities

• Performs cyber threat analysis, alerting, and reporting based on intelligence gathered from both internal and external sources.
• Conducts research using multiple data sources, evaluates collection, performs analysis and disseminates findings to stakeholders.
• Analyses cyber threat data and synthesizes the analysis with cyber threats impacting the Bank; identifies, escalates, and fills intelligence gaps.
• Actively monitors and researches cyber threats with a direct or indirect impact to the Bank, region, business operations, technology infrastructure and client trust.
• Interacts daily with Infrastructure Operations and collaborates with the Bank’s Information Security staff members to support ongoing threat intelligence analysis and vulnerability tracking.
• Prepares written reports and gives presentations to internal customers as needed.
• Applies expertise to conduct intrusion analysis following the Lockheed Martin Kill Chain, MITRE ATT&CK and ISF IRAM2 frameworks to ascertain the impact of an attack and develops threat trends to develop mitigation techniques and countermeasures that can prevent future attacks.
• Leads and manages regular conference calls with internal teams and third-party providers to review cyber threat deliverables, intelligence gap support, quality, and implement intelligence delivery improvements.
• Provides cyber threat analysis to support Threat Intelligence development and research.
• Triages, processes, analyses, and disseminates Threat Intelligence alerts, reports, and briefings.
• Develops long-term, strategic partnerships with senior business stakeholders and vendors, influencing, persuading and negotiating with them to achieve business and customer objectives

Essential Requirements

• Motivated self-starter with experience in the cyber threat intelligence field, preferably with experience in researching and reporting on threats to mobile platforms
• Ability to produce quality finished intelligence products on short deadlines, as well as continuing to maintain analysis for and report on long term strategic assessments
• Knowledge of cyber threat intelligence analytic frameworks including Cyber Kill Chain, and Mitre ATT&CK and ISF IRAM2
• Knowledge of Advanced Persistent Threat (APT) actors and associated tools, techniques, and procedures (TTPs)
• Experience in one or more of the following: 1) Analysing, reviewing, and integrating intel data from a variety of sources. 2) Operating intel systems and analysis systems. 3) Providing analysis of threats and making recommendations to support the Bank’s teams. 4) Developing and coordinating intel plans and requirements

Essential Qualifications

• Extensive experience in information security (network, application and systems) or related technology experience required, experience in the financial services industry is preferred.
• Strong knowledge of technology and security controls related to the detection, analysis, containment, eradication, and recovery from cyber security incidents.
• Ability to identify the strengths and weaknesses of IT systems.
• A good understanding of how threat actors work and ability to keep up with the fast pace of change in the criminal cyber-underworld.
• An understanding of the intelligence cycle, and experience with Threat Intelligence Platforms.
• Professional Certifications an advantage but not essential if have requisite role knowledge,GCIH, GNFA, GFCA, Certified Ethical Hacker (CEH), CISSP certificationa plus.
• Technical writing experience with management level reports

Desirable Qualifications, Skills & Experience

• Strong incident response, penetration testing or vulnerability management experience
• Strong communication and interpersonal skills while being able to communicate at all levels effectively
• Understands risk and operating in the regulated financial sector
• Display an adversarial mind-set and thinking about how the Banks defences could be breached.
• Experience in reviewing the security of systems in conjunction with development teams
• Experience in risk identification, secure software design, secure architectures, security testing and vulnerability management and remediation.
• Significant experience and detailed technical knowledge in multiple areas of; security engineering, system and network security, authentication and security protocols, cryptography, threat intelligence and application security.